HTTP Profile breaking HTTPS
I have a https_vs that does not offload the SSL. I also have two pools https_pool and https_training_pool. I have to have iRules to inspect the https address for "portal.newco.com" to go to the https_pool and "training.newco.com" to go to the https_training_pool. I have looked for a week now and everything I read says that I have to set up Type:Standard, Protocol:TCP & HTTP Profile:http. Whenever I set these I can't get to my web servers. I can't implement the iRule w/o setting the HTTP Profile to http. When I remove the HTTP Profile and leave everything else, it works, but I then I can't use the iRule.
It's mandatory to offload SSL in BigIP to inspect the HTTP headers (Host, and others). There's no way around it. However, you can use serverssl profile in conjunction with clientssl to re-encrypt before the request gets forwarded to a pool member.